HTA - Mutliple questions about using WScript.Shell's Run Method and control.exe

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I wrote an HTA to simplify the lives of administrators who work in a
LUA environment (one normal account, one admin account used for admin
tasks). Basically, you execute a "web page" that you authenticate
your "admin" account with and as long as that web page remains open,
you can click links, configure links, or just run arbitrary files from
the interface and they will execute with admin rights because the HTA
is running under your admin account's security context. To make
things even more simpler, I created a tab that has common
administrative tools that, I personally use but assume that others use
as well. Regardless, most of those custom administrative tasks I've
tried to link use an argument and control.exe to bring up a different
Control Panel Applet (eg Add/Remove Progs, Add Hardware Wiz, etc), my
problem is that most work, some don't, and some bring up something
totally and completely different. Here is the specific section of
code in the HTA that actually runs the specified program:

[code]
' Above this code, the executable control.exe is held in tempArr(0)
and it's argument is in tempArr(1)
sCmdLine = Trim(tempArr(0)) & " " & Trim(tempArr(1))
'sCmdLine = "control.exe ncpa.cpl"
'MsgBox sCmdLine
oShell.Run sCmdLine, 9, False
[/code]

As you can see, I'm trimming array elements to rid myself of empty
space, I've even tried opening a Command Prompt Window running a
command from there, having it work, then copy and pasting the command
string into sCmdLine and it still doesn't work.

I must be misunderstanding some part of how control.exe or the Run
method works. So I guess my questions are:

1) Am I missing something simple or does someone know what I'm doing
wrong?
2) Is there a command line to kick off the entire Control Panel window
and not just the individual applets? ..I've tried "RunDll32.exe
shell32.dll,Control_RunDLL" but when my HTA executes that statement,
it brings up a Windows Explorer window starting at my root of C:
3) Is there a way to kick off explorer.exe using the Run method?
Right now, people who use my program just open up the Internet
Explorer link and then type in C: which takes them to a Windows
Explorer window but I heard that this is no longer supported in IE7 or
Vista so I need to find a work around for that hack.

Thank you for taking the time to read this long thread. I appreciate
any and all feedback possible. By the way, you can download and use
or view the source to this program at my site, here:
http://www.thepip3r.com/index.php?m=projects;hta;&p=runas_admin

.

Relevant Pages

  • Re: Accidetally changed me Admin password
    ... If you are currently logged on to the administrative account, ... type CTRL-ALT-DEL and a window should pop up. ... > Admin password and now I cant restart my computer as I ...
    (microsoft.public.windowsxp.security_admin)
  • Re: ?? "Access is Denied" during USB Driver Installation
    ... Admin logon, by double clicking alt-ctl-del twice and the signon ... tried running the card reader install again, ... pop up window comes up in the upper left corner, ... > 1) You can't remove the administrator account, ...
    (microsoft.public.windowsxp.basics)
  • Re: parental control over PC usage
    ... You are setting the password of another account. ... This way window thinks that someone else is resetting the password so window will ... How do I set up a user account for everyday use which has the same settings, ... How do I password-protect this alternate admin. ...
    (microsoft.public.windowsxp.general)
  • Re: Incoming E-Mail - cant create contact in OU
    ... central admin pool different than the web app. ... that account a little (if the web app is compromised or something, ... So I started with giving the app pool account domain admins permissions then ...
    (microsoft.public.sharepoint.windowsservices)
  • RE: [Full-disclosure] Flaw in Microsoft Domain Account Caching Allows Local Workstation Admins t
    ... Flaw in Microsoft Domain Account Caching Allows ... Local Workstation Admins to Temporarily Escalate Privileges and Login as ... Cached Domain Admin Accounts ... administrator" is a "bigger" administrator than the local administrator. ...
    (Bugtraq)